A Microsoft account lockout has left the developer of WireGuard unable to ship updates to Windows users, raising new concerns about how a single platform decision can disrupt security software used by millions.
Jason Donenfeld, the creator of the open-source WireGuard VPN, was locked out of the developer side of his Microsoft account and, as a result, could no longer sign drivers or deliver updates for WireGuard on Windows.
Donenfeld said on X that the account termination stopped a WireGuard update from shipping.
WireGuard’s Windows release process has been blocked
The immediate issue is not just account access, but what that access controls.
TechCrunch said Donenfeld had spent weeks modernizing WireGuard’s Windows code and was preparing to submit an update to Microsoft for review when he hit an access restricted error.
Because Windows drivers can grant deep access to an operating system and its data, Microsoft limits publishing rights to vetted developers through its Windows Hardware Program. Without access to that program, developers cannot sign drivers or push certain updates to users.
Donenfeld told TechCrunch the risk would be far worse if a serious flaw emerged while the lockout remained in place.
In an email quoted by the outlet, he said, If there were a critical vulnerability to fix right now — there isn’t! I just mean hypothetically — then users would be totally exposed.
That comment underscores why the incident matters beyond one delayed release: WireGuard is not a niche side project, but a foundational VPN technology used in products and services such as Proton and Tailscale, according to TechCrunch.
Other major privacy tools were hit too
PCMag reported that Donenfeld’s case is not isolated. This is the second such incident involving a high-profile open-source security project, noting that VeraCrypt developer Mounir Idrassi was also locked out of his Microsoft developer account.
In that case, Idrassi shared that the problem meant he could miss a critical certificate authority expiration, which he said might prevent some users from booting up their systems.
The issue appears to extend beyond those two projects.
Windscribe, which makes VPN and other privacy tools, also posted that it had been locked out of its Partner Center account despite having a verified account for more than eight years.
In its message, Windscribe said it had been trying to resolve the matter for over a month and described Microsoft support as effectively absent.
Verification rules appear to be at the center of the problem
Donenfeld later found a Microsoft page stating that the company had been carrying out mandatory account verification for all partners in the Windows Hardware Program who have not completed account verification since April 2024.
The verification process had now concluded, meaning developers who had not completed it had their accounts suspended. Donenfeld shared that despite submitting a driver’s license or passport through Microsoft’s third-party verification process and being told he was verified, his access still remained blocked.
What appears to have angered developers most is not only the suspension itself, but the lack of warning. Donenfeld shared, Microsoft never sent me any notification at all about this. I’ve looked in every inbox in every spam folder in every mail log, and zero, nothing, zilch.
He said Microsoft’s executive support team later confirmed his appeal had been received, but told him the review could take as long as 60 days.
A support problem with security consequences
By late Wednesday, Donenfeld said he was finally in contact with Microsoft and hoped the issue would soon be resolved. Microsoft did not immediately comment to the outlet.
But even if access is restored, the episode has exposed a fragile point in the Windows software ecosystem: when account controls fail or support breaks down, even widely used security tools can be frozen at the exact moment users may need them most.
